In recent years, there has been a shift in computing architectures, moving away from centralized cloud computing towards decentralized edge and fog computing. This shift is driven by factors such as the increasing volume of data generated at the edge, the growing demand for real-time processing and low-latency applications, and the need for improved privacy and data locality. Although this new paradigm offers numerous advantages, it also introduces significant security and reliability challenges. This paper aims to review the architectures and technologies employed in fog computing and identify opportunities for developing novel security assessment and security hardening techniques. These techniques include secure configuration and debloating to enhance the security of middleware, testing techniques to assess secure communication mechanisms, and automated rehosting to speed up the security testing of embedded firmware.
翻译:近年来,计算架构正从集中式云计算向分散式边缘计算与雾计算转变。这一转变受到以下因素的驱动:边缘端生成的数据量持续增长、对实时处理与低延迟应用的需求日益增加,以及提升隐私保护与数据本地化的要求。尽管这一新范式具有诸多优势,但也带来了显著的安全与可靠性挑战。本文旨在综述雾计算中采用的架构与技术,并识别开发新型安全评估与加固技术的机遇。这些技术包括:通过安全配置与精简功能增强中间件安全性、用于评估安全通信机制的测试技术,以及通过自动化代码移植加速嵌入式固件安全测试的方法。